gitea-hostmatcher-0000-ssrf

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · gitea-hostmatcher-0000-ssrf gitea-hostmatcher-0000-ssrf Gitea 1.27.3 - Gitea CVE-2026-22874 added reservedIPNets. CGNAT, TEST-NET, NAT64, Teredo, Azure WireServer. Real ranges. Not RFC 6890 0.0.0.0/8, the old "this...

Design/Logic Flaw

cgi-bin/drknow.cgi in Innotube ITGuard-Manager 0.0.0.1 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the username field, as demonstrated by a username beginning with "admin|" to use the '|' metacharacter...